ShareFile
View PDF

How to renew SSL Certificate on a ShareFile Storage Zone Server

February 19, 2024
Contributed by: 
P

This article contains the steps for how to renew the SSL Certificate for a Customer Managed Storage Zone Controller Server.

How to renew SSL Certificate on a ShareFile Storage Zone Server

  1. Create a CSR in IIS.
  2. Have the Certificate Provider sign the CSR.
  3. Complete the Certificate Signing Request in IIS.
  4. Bind the new certificate to the IIS Server.
  5. Reset IIS services.

1. Create a CSR in IIS

Complete the following steps to generate a certificate signing request (CSR) for Microsoft IIS.

  1. Click Start > Administrative Tools > Internet Information Services (IIS) Manager.
  2. In the IIS Manager, select your server name.
  3. In the central pane, double-click the Server Certificates option located in the IIS section.
  4. To begin the process of requesting a new certificate, from the Actions pane, select Create Certificate Request option.
  5. The first screen of the wizard asks for details regarding the new site. All the fields must be entered. To fill in this form, consider the following:
    • Country/region(C): Use the two-letter code without punctuation for country, for example: US or CA.
    • State/ province (S): Spell out the state completely; do not abbreviate the state or province name, for example: California.
    • City/locality (L): The Locality field is the city or town name, for example: Berkeley.
    • Organization (O): If your company or department has an &, @, or any other symbol using the shift key type in its name, you must spell out the symbol or omit it to enroll, for example: XY & Z Corporation would be XYZ Corporation or XY and Z Corporation.
    • Organizational unit (OU): This field is the name of the department or organization unit making the request.
    • Common name (CN): The Common name is the Host + Domain Name. It looks like “www. company. com”, or “.company. com” for a wildcard certificate. The common name here must match the Base URL of your Storage Zone server group. For example, if the Base URL is http(s):// storagezone. yourcompany. com, then the common name here should be storagezone. yourcompany. com. If you are planning to create a wildcard certificate, the common name can be*. yourcompany. com.

      Note:

      SSL certificates can only be used on web servers using the Common Name specified during enrollment. For example, a certificate for the domain “domain. com” will receive a warning if accessing a site named “www. domain. com” or “secure. domain. com”, because “www. domain .com”and “secure .domain. com” are different from “domain .com”.

  6. Click Next to continue.
  7. In the Cryptographic Service Provider Properties screen, retain the default option Microsoft RSA SChannel Cryptography Provider and select a key Bit length of 2048.
  8. Click Next to continue.
  9. Type a file name to which you want to save the certificate request. Note: You will need the contents of this file in the next step. Therefore, ensure you know where to find it. To change the location of where you want to save the CSR, select the box with the 3 periods next to the file name.

2. Have the Credential Provider Sign the CSR

You need to do it from their website or contact your credential provider for this step.

3. Complete the Certificate Signing Request in IIS

  1. On the server where you created the CSR, save the SSL certificate .cer/.pem file.
  2. In the Windows start menu, type Internet Information Services (IIS) Manager and open it.
  3. In Internet Information Services (IIS) Manager, in the Connections menu tree (left pane), locate and click the server name.
  4. On the server name Home page (center pane), in the IIS section, double-click Server Certificates.
  5. On the Server Certificates page (center pane), in the Actions menu (right pane), click the Complete Certificate Request… link.
  6. In the Complete Certificate Request wizard, on the Specify Certificate Authority Response page, you need to import the .cer/.pem file and click finish.

4. Bind the new certificate to the IIS Server

  1. In the IIS Manager console, click Default Web Site and then click Bindings.
  2. Edit the binding for port 443. On the SSL certificate drop down, select the new SSL Cert that you just imported and click OK.

5. Restart IIS

Under Manage Website, click on Restart.

How to renew SSL Certificate on a ShareFile Storage Zone Server
February 19, 2024
Contributed by: 
P
February 19, 2024
Contributed by: 
P

In this article

Site feedback | Privacy and legal terms | Cookie preferences

About Us | Awards | Press Releases | Media Coverage | Careers | Offices | Security Center | License Agreement | Do Not Sell or Share My Personal Information

Copyright © Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.

Progress and certain product names used herein are trademarks or registered trademarks of Progress Software Corporation and/or one of its subsidiaries or affiliates in the U.S. and/or other countries. See Trademarks for appropriate markings. All rights in any other trademarks contained herein are reserved by their respective owners and their inclusion does not imply an endorsement, affiliation, or sponsorship as between Progress and the respective owners.